Vulnerabilities exploitable today
378,377in current view
Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.
In KEV catalog1,717
New KEV · 24H0
Exploit Today ≥ 701,649
Distribution · last window
- Critical2,326
- High8,522
- Medium6,833
- Low770
Filters
Window
Severity
Flags
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2022-40697—33.1%
——10——CVE-2026-65623—33.1%
——10Inefficient Algorithmic Complexity vulnerability in mtrudel bandit allows unauthenticated remote denial of service via CPU exhaustion during WebSocket fragment reassembly.
The size guard 'Elixir.Bandit.WebSocket.Connection':oversize_message?/2 called from handle_frame/3 in lib/bandit/websocket/connection.ex appends each non-final continuation frame to a left-nested iolist and then re-measures the entire accumulated buffer with IO.iodata_length/1 on every frame. Because the buffer grows by one element per frame and is fully re-traversed each time, reassembly work is quadratic (O(n^2)) in the number of continuation frames.
The max_fragmented_message_size limit (default 8 MB) bounds total bytes but not frame count, and each frame can carry as little as one payload byte, so an attacker can send millions of tiny continuation frames using modest bandwidth to pin a CPU core for minutes to hours. Many concurrent connections can starve the whole server of CPU, denying service to legitimate users. The WebSocket read timeout does not help, because it is an idle timeout evaluated between reads and cannot preempt the synchronous reassembly work spent inside a single callback.
This issue affects bandit: from 1.11.0 before 1.12.1.54dCVE-2023-24386—33.1%
——10——CVE-2023-25972—33.1%
——10——CVE-2024-27729—33.1%
——10——CVE-2023-23870—33.1%
——10——CVE-2025-59103—33.1%
——10——CVE-2023-40632—33.1%
——10——CVE-2023-23734—33.1%
——10——CVE-2023-25974—33.1%
——10——CVE-2022-47423—33.1%
——10——CVE-2023-24002—33.1%
——10——CVE-2022-44632—33.1%
——10——CVE-2023-28533—33.1%
——10——CVE-2022-44582—33.1%
——10——CVE-2026-02508.1 HIG33.1%
——10A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man in the middle attacker to disrupt system processes and potentially execute arbitrary code with SYSTEM privileges. This vulnerability is triggered during the processing of requests and responses exchanged between Portal and Gateway.
The GlobalProtect app on iOS is not affected.70dCVE-2023-23722—33.1%
——10——CVE-2022-46819—33.1%
——10——CVE-2026-30653—33.1%
——10——CVE-2023-23683—33.1%
——10——CVE-2026-3298—33.1%
——10The method "sock_recvfrom_into()" of "asyncio.ProacterEventLoop" (Windows only) was missing a boundary check for the data buffer when using nbytes parameter. This allowed for an out-of-bounds buffer write if data was larger than the buffer size. Non-Windows platforms are not affected.41dCVE-2023-24004—33.1%
——10——CVE-2023-23821—33.1%
——10——CVE-2023-23980—33.1%
——10——CVE-2021-38997—33.1%
——10——CVE-2022-34148—33.1%
——10——CVE-2022-42462—33.1%
——10——CVE-2023-24403—33.1%
——10——CVE-2023-28174—33.1%
——10——CVE-2023-22715—33.1%
——10——CVE-2023-28414—33.1%
——10——CVE-2026-172208.2 HIG33.1%
——10IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and modify authentication metadata due to a buffer overflow.36dCVE-2023-26528—33.1%
——10——CVE-2023-32162—33.1%
——10——CVE-2022-3609—33.1%
——10——CVE-2023-23972—33.1%
——10——CVE-2023-23981—33.1%
——10——CVE-2026-581817.5 HIG33.1%
——10The Apache Traffic Server uri_signing and url_sig plugins can exhaust the stack or crash on attacker input.
This issue affects Apache Traffic Server: from 8.0.0 through 8.1.9, from 9.0.0 through 9.2.14, from 10.0.0 through 10.1.3.
Users are recommended to upgrade to version 9.2.15 or 10.1.4, which fix the issue.53dCVE-2022-44734—33.1%
——10——CVE-2023-22680—33.1%
——10——